Lucene search

K
redosRedosROS-20240717-03
HistoryJul 17, 2024 - 12:00 a.m.

ROS-20240717-03

2024-07-1700:00:00
redos.red-soft.ru
8
gnutls
cryptographic library
vulnerability
remote attackers
denial of service
arbitrary code

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

A vulnerability in the implementation of the gnutls_pkcs7_verify() function of the GnuTLS cryptographic library is related to
double release errors occurring during verification of pkcs7 signatures. Exploitation of the vulnerability could
Allow an attacker acting remotely to cause a denial of service or potentially execute
arbitrary code

A vulnerability in the implementation of the wrap_nettle_hash_fast() function of the GnuTLS cryptographic library is associated with
pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service.
remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64gnutls< 3.6.16-6UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High